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Millions of computers are under a constant, multi-level and multi-faceted attack 
designed to steal information. But nearly 80 percent of cyber crime can be prevented. 
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AN URGENT PRIORITY 

What to watch on the Hill 

Cyber security for U.S. 
companies, the government 
and citizens is complex. 
Recent reports about attacks 
on organizations such as Sony, 
Lockheed Martin and PBS seem to 
surprise many, but this is not a new 
phenomenon. They relentlessly 
pursue secrets and intellectual 
property at a mind-blowing pace; 
and this is very different from the 
pursuit of financial gain that drives 
cybercrime. 

Some members of Congress 
are addressing this growing threat 
to protect our personal finances, 
our jobs and our economy "From 
my end,'' political strategist Rachel 
Pearson of Pearson and Associates 
notes, "the human side of the very 
productive working relationship 
between Republican Rep. Mike 
Pogers {chairman of the House 
Intelligence Committee) and 
Democrat Rep. Charles Albert 
'Dutch' Ruppersberger 3s central" 
Together, they recently sponsored 
the 13-page "Cyber Information 
Sharing & Protection Act (CISPA)" 
bill, described as a "critical and 
necessary first step* that passed th 
Mouse with overwhelming bipartisa 
and industry support. 



I t's an attack that you cannot see, but you 
I most certainly have felt it. According to 
I government figures, the United States has 
I lost hundreds of billions of dollars as the 
result of cyber crime, cy ber espionage and cyber 
war. In todays economy, one would think that 
the alarm beDs would be ringing. It's happening 
now, it happened yesterday, and it will happen at 
an even greater extent tomorrow. 

The National Security Administrations 
director general, Keith Alexander, states that 
economic espionage through cyber attacks is 



the "greatest transfer of wealth in [American] 
history," It does seem a bit unreal. Unfortunately, 
it is very real. Most security experts today will tell 
you that there are only two types of companies 
in the United States: one that knows it has been 
"hacked" or attacked via its computers, and the 
other that does not know it has been attacked. 

• In 2ort, software company Norton estimated U.S. costs 
due to cybercrime at $14G billion, 132 biJiion of which 
came directly from theft, the rest as a result of time lost 
to repairs from malware. ($388 billion in worldwide costs) 



* Growing threat: the Pone/non Institutes sample grc 
Saw a 50 percent cost increase to companies fr 
cybercrime and a 40 percent increase in the frequency 
attacks From 20KD to 2OU 

Even if your identity has not been stol< 
your computer may have been co-opt 
to serve in a vast net, a "zombie army" tl 
disrupts, attacks and steals on a large scale. W 
are the attackers? Is it the teenager in his 
her parents basement with bunny slippers a 
a Mountain Dew who has just hacked into t 
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i DO TO PROTECT 
YOURSELF? 

Tips to secure your personal computer and 
prevent cyber crime: 

• Update operating systems and software to the latest versions 
to protect yourself from "malware"- malicious software that 

• Even, emails from people you know may contain malware links 
or attachments if an account has been hacked; be careful when 
following links and visit websites by entering the addresses 
directly into your browser. 

■ Encrypt sensitive, personal data. 

• Do not provide personal Information on social networking 

sites such as address or birthday. 

• Do not log into personal accounts over public WIFI networks. 

• Do not plug unknown USB devices into your computer. 



5.5 billion 

TOTAL ATTACKS 
BLOCKED IN 2011 
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principal's computer to 
change his grades? We 
should all wish for those 
days. Today, the attackers 
are lone "entrepreneurs," 
organized "hacktivists," 
and cyber crime 
syndicates — organized 
syndicates, mercenary for 
sale, nation state warfare, 
zombie armies, invisible 
botnets, Operation Shady 
Rat — this sounds like 
the trailer for the next 
movie blockbuster, or 
the next Vince Flynn 
novel, or even the 
next Avengers movie. 
Unfortunately, this is 
today's reality. 



"EVERY YEAR , AN AMOUNT 

OF INTELLECTUAL 
PROPERTY LARGER THAN 

THAT CONTAINED l\ THE 

STOLEN FROM NETWORKS 
MAINTAINED BY U.S. 
BUSINESSES, UNIVERSITIES AND 
GOVERNMENT DEPARTMENTS 
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A few examples 
highlighting public cases of 
cyber attacks: 

SONY CORPORATION: 
One of the most newsworthy 
attacks in recent history is that 



of Sony. In 201 1 , hacker; breached Sony's customer 
network compromising more than 70 million 
records. Sony estimated the cost at $171 million. 

STRATEGIC FORECASTING! A data 
breach at the intelligence analytics firm. 
Strategic Forecasting, disclosed in December 



2011, was attributed to 
Antisec, a "hacktivist" 
gtoup affiliated with 
Anonymous that used 
the 68,000 stolen credit 
card numbers to make 
donations to charity. 

EPSILON: The Texas- 
based marketing finr 
suffered a data breach ir 
2011 in which 60 millior 
names and email addresse: 
were stolen from customer 
for more than 50 majo 
retailers and banks, Esdmate 
for the total costs — 
projected to include forensi. 
analysis, monitoring, fine: 
litigation and lost busine? 
reputation damage ■ — ■ var 
from $100 million to as much as $4 billion. 

TJ MAXX: In 2007, the clothing retaile 
breach caused by a remote intrusion resulte 
in the compromise of more than 94 millio 
credit card accounts, estimated at $64 millio 



WASHINGTON LIRE 



OCTOBER 2P12 wa s h i n gt ortj j f E.CO m 



